This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json) Hash identifier: 97Iy68tyajGuPNcrPC/C8sIMebFo6VmL+wdeMuVoZyk= Subject key identifier: CA:10:8C:A9:1B:BE:3B:D3:40:57:1F:78:12:DB:A0:F1:6F:A5:47:53 Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91 Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391 Certificate serial: 019AF23FBBDFAC7BF0F08CA46F133182D831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft Manifest number: 108A Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: QmlrIaYmWx9sTNaxjbK2SsZ1utxerUELSOF4fpQeRWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bb:df:ac:7b:f0:f0:8c:a4:6f:13:31:82:d8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=ca108ca91bbe3bd340571f7812dba0f16fa54753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:7d:1d:76:5f:e8:ba:62:c7:40:c2:a0:62: 22:b4:87:62:6e:f7:9f:03:1e:83:34:4e:6e:7d:4a: b7:ac:af:7a:22:17:af:13:9c:06:46:35:0c:87:e5: d7:eb:eb:71:8f:b9:5e:83:46:82:12:71:9a:21:31: 53:aa:2a:67:55:55:8d:dc:98:3c:c0:d7:96:e4:d2: d0:bf:f7:ea:68:0b:1a:07:f0:52:59:6c:61:a1:b7: 4f:78:de:50:6c:72:62:9e:30:be:22:3d:44:55:e3: 33:66:c4:e3:f2:95:54:eb:73:9d:fa:64:fe:c5:4f: 49:fd:0a:55:66:f3:27:f8:c7:3d:f7:18:d3:a0:dc: 18:d3:d6:b1:7e:cf:14:f0:93:84:55:82:16:ba:93: f6:84:24:e6:81:b3:a6:2d:10:a2:c2:9d:7b:b6:64: ba:ef:7d:a9:43:89:be:c7:97:c3:c3:c4:72:48:11: 0e:45:a2:c3:49:53:c4:9f:db:d7:d9:bf:8f:db:ec: e7:72:41:07:59:7a:e6:7e:20:9a:c7:d6:d7:43:50: f9:61:7a:14:ef:b0:a4:00:fa:52:dc:18:bd:69:29: 7d:01:41:b3:64:93:d2:20:54:74:bb:c8:11:43:4b: c9:a7:73:6d:11:42:b7:1b:3e:85:79:4b:16:d9:bd: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:10:8C:A9:1B:BE:3B:D3:40:57:1F:78:12:DB:A0:F1:6F:A5:47:53 X509v3 Authority Key Identifier: keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cc:af:42:44:93:f8:e8:d3:89:0e:f6:bb:50:5b:7b:61:37: 04:14:29:20:96:d4:2b:dd:91:4d:d0:b8:72:b5:96:9e:34:71: a4:1e:53:0c:4a:54:ae:d1:29:a0:db:41:65:e5:f7:23:8c:da: 79:4a:89:bf:ef:2e:84:17:59:ea:e6:26:91:cf:af:bb:e7:47: fb:86:73:c5:20:9e:a2:d4:7d:b4:9b:c3:42:be:5f:8a:f8:b7: 3d:aa:35:62:62:cf:cc:a5:41:d9:a8:37:86:ef:b4:90:5a:fb: d6:28:79:8c:48:d9:0b:4d:8c:74:6f:ac:44:31:fe:d9:f6:1f: 83:f0:98:67:f3:9e:e4:92:73:3d:97:7e:10:ed:17:d5:a4:a7: 8e:2d:5a:4e:6a:86:0d:fb:03:77:28:a3:cc:69:42:56:d7:82: 30:ea:47:af:7f:dd:7b:08:fd:1b:0e:40:71:26:ae:f1:ab:a1: f5:3a:28:93:91:27:9c:51:f6:52:b0:e8:8b:23:69:a5:00:e5: 16:29:ff:ac:c8:b5:ef:ce:57:d5:d7:0b:8d:93:b0:13:32:d3: aa:61:ee:b5:da:2b:da:ea:f7:23:a4:7e:48:a6:de:9f:57:7b: 77:1a:9c:97:6a:cb:48:a5:fd:16:e5:c3:a9:d5:68:50:94:9e: 88:c1:a4:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7vfrHvw8IykbxMxgtgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTFlZjg1MTFiNzU2MmJmM2RjM2MwYjA0MDkzYjMzN2Jj ZTAzOTEwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EyhjYTEwOGNhOTFiYmUzYmQzNDA1NzFmNzgxMmRiYTBmMTZmYTU0NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdF9HXZf6Lpix0DCoGIitIdibvef Ax6DNE5ufUq3rK96IhevE5wGRjUMh+XX6+txj7leg0aCEnGaITFTqipnVVWN3Jg8 wNeW5NLQv/fqaAsaB/BSWWxhobdPeN5QbHJinjC+Ij1EVeMzZsTj8pVU63Od+mT+ xU9J/QpVZvMn+Mc99xjToNwY09axfs8U8JOEVYIWupP2hCTmgbOmLRCiwp17tmS6 732pQ4m+x5fDw8RySBEORaLDSVPEn9vX2b+P2+znckEHWXrmfiCax9bXQ1D5YXoU 77CkAPpS3Bi9aSl9AUGzZJPSIFR0u8gRQ0vJp3NtEUK3Gz6FeUsW2b3+zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoQjKkbvjvTQFcfeBLboPFvpUdTMB8GA1UdIwQY MBaAFOLh74URt1Yr89w8CwQJOzN7zgORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMt OWI2NTg5MGUyZWFlLzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMtOWI2NTg5MGUyZWFl LzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcyvQkST +OjTiQ72u1Bbe2E3BBQpIJbUK92RTdC4crWWnjRxpB5TDEpUrtEpoNtBZeX3I4za eUqJv+8uhBdZ6uYmkc+vu+dH+4ZzxSCeotR9tJvDQr5fivi3Pao1YmLPzKVB2ag3 hu+0kFr71ih5jEjZC02MdG+sRDH+2fYfg/CYZ/Oe5JJzPZd+EO0X1aSnji1aTmqG DfsDdyijzGlCVteCMOpHr3/dewj9Gw5AcSau8auh9Took5EnnFH2UrDoiyNppQDl Fin/rMi1785X1dcLjZOwEzLTqmHutdor2ur3I6R+SKben1d7dxqcl2rLSKX9FuXD qdVoUJSeiMGk5g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:11 2025 by rpki-client